Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/232da63b-437a-3e69-ac54-bbbc495feb76.roa
File:                     232da63b-437a-3e69-ac54-bbbc495feb76.roa (raw, json)
Hash identifier:          4xWmGaYXXLdeRTt580Jfb4/pfUTy5kNDyrM6npG/DXs=
Subject key identifier:   72:F7:B6:EF:95:22:4D:E5:D6:57:D8:77:1B:04:11:D2:58:C7:C8:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F6A89D8A6DC9DE4A2D580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/232da63b-437a-3e69-ac54-bbbc495feb76.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.231.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:6a:89:d8:a6:dc:9d:e4:a2:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=1438d369-e82d-45ce-ba75-a4d1d2e387e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:4b:7c:8b:3c:92:87:b0:d4:41:8e:a0:11:
                    2d:09:e9:8a:85:1b:58:5c:f9:77:7f:0e:ad:01:19:
                    fe:b3:38:8e:cf:b6:c1:90:4e:86:56:28:99:5b:eb:
                    ea:f6:0f:8b:8f:13:fd:44:d4:9c:c7:c2:3a:ef:dc:
                    48:c3:a9:41:07:69:5a:f8:ca:50:5e:97:39:4c:40:
                    12:91:f1:48:00:8b:ef:ca:d4:59:18:ac:e6:b7:2b:
                    95:62:ae:b3:7c:37:7e:03:50:22:65:bd:a0:bd:47:
                    29:57:1b:a7:69:d6:50:a9:e3:ff:41:00:6b:b2:0c:
                    6c:f6:ec:63:77:0f:5c:db:56:1e:f3:19:00:0f:c5:
                    02:80:a1:83:b5:87:d8:37:e7:97:9f:6e:ba:20:ac:
                    cc:77:b7:05:df:03:c1:2a:dd:40:92:2c:5f:3b:b2:
                    58:c7:02:e4:48:a2:16:51:6b:3e:62:ae:b7:af:d0:
                    3e:95:7c:a8:33:c4:9e:9b:83:a9:09:46:06:6c:93:
                    57:07:9f:66:da:28:53:26:db:19:61:1f:19:23:93:
                    c7:2f:20:7d:a6:01:28:35:8c:4a:ab:4d:bd:6f:8e:
                    3f:64:7b:b7:b7:a4:ca:07:84:cd:b8:7b:dd:b1:49:
                    18:7e:7b:a8:3f:8a:dc:87:25:81:88:f9:a2:29:2a:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F7:B6:EF:95:22:4D:E5:D6:57:D8:77:1B:04:11:D2:58:C7:C8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/232da63b-437a-3e69-ac54-bbbc495feb76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.231.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:87:ca:50:1d:94:31:d2:ff:dc:13:56:e6:1a:2d:c5:ad:ed:
         36:3d:7a:46:45:7c:40:da:11:21:6e:21:7d:34:87:35:d2:4f:
         a6:67:56:3b:56:bc:34:eb:2c:42:6c:58:51:d1:74:26:3f:d5:
         0c:48:22:00:4b:8f:a3:65:4a:3c:e2:bb:d2:df:12:ea:23:ef:
         b0:95:2f:af:41:e3:46:89:06:46:5a:53:4b:6c:b6:96:eb:da:
         7c:35:49:9d:ef:2e:aa:31:a9:e1:f0:5c:03:20:f6:81:cc:ce:
         f2:a1:75:ce:0d:37:4a:bb:3d:14:d3:17:51:bc:21:ce:c7:94:
         f1:a8:fe:ae:d8:44:cd:68:23:d3:b6:e3:9c:48:d6:8b:e1:30:
         93:79:22:06:b9:c7:6e:d9:4d:04:93:19:43:ec:fc:7c:8a:39:
         01:f9:0d:18:45:90:6f:55:6a:3f:ee:d4:44:91:64:b2:a9:73:
         f1:ff:ee:82:3d:9e:43:5c:16:8f:cf:d6:20:45:90:8f:0b:a8:
         6b:e1:f5:a3:bc:f7:32:6f:d0:4f:76:57:13:09:ad:12:81:d6:
         0f:c2:7a:b0:31:09:83:c5:45:c5:59:a0:d2:37:a4:bd:e0:87:
         fb:07:19:01:69:fb:f7:1a:4e:46:d3:d3:d7:02:39:47:a0:f9:
         be:7a:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:59:39 2025 by rpki-client